Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/fb0a3356-03fd-361d-a7c8-8772eaf1d30f.roa
File:                     fb0a3356-03fd-361d-a7c8-8772eaf1d30f.roa (raw, json)
Hash identifier:          Fx41+ta21qIZ183AFsqPwHzpcH0Z1NEGqp5Sam2O9Wk=
Subject key identifier:   6C:D6:FF:43:FC:BB:22:1C:43:4F:AE:FE:2B:92:A9:E4:ED:2C:1A:71
Certificate issuer:       /CN=79b1fe7a-eca9-422f-9043-5a93ca5145c8
Certificate serial:       010D0C9F4328584F4976599DF142B1F6A08E8F50
Authority key identifier: 0C:61:A1:93:6A:44:3C:E2:11:31:FA:40:42:68:F7:A6:E7:34:84:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/fb0a3356-03fd-361d-a7c8-8772eaf1d30f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        149.48.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:59:9d:f1:42:b1:f6:a0:8e:8f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79b1fe7a-eca9-422f-9043-5a93ca5145c8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=620119d5-5876-41a5-95c9-4bfb37216f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1c:7c:77:4c:7d:3b:37:bb:ff:a0:9a:ca:44:
                    c4:05:3b:44:fe:0c:2d:ef:c6:49:b4:55:c5:8c:7c:
                    da:77:23:d3:f6:c9:87:6f:47:99:39:9c:b1:39:03:
                    d1:10:c9:21:30:45:d0:8a:67:3c:28:3f:69:5a:e2:
                    38:14:6e:76:f6:95:d8:1d:79:f9:ba:bc:a6:e4:87:
                    94:84:54:75:09:d0:e0:2c:9f:29:0c:b3:24:47:1c:
                    ff:66:14:83:eb:9d:59:55:ab:04:4d:e0:9c:02:35:
                    68:c8:e2:6d:8a:65:f8:fa:d0:5a:53:08:e4:96:25:
                    ce:48:7d:b4:21:af:fb:1d:9f:00:98:30:06:e0:55:
                    56:e8:e2:7d:7c:dc:95:ee:32:ff:c1:b1:0e:4d:28:
                    a2:13:ee:e5:57:99:7d:76:a5:16:2e:f5:de:ff:7a:
                    09:76:11:57:1b:e8:43:0e:69:28:06:de:d5:f0:27:
                    be:52:72:1a:96:26:c7:74:a9:56:1d:27:f8:2e:61:
                    27:46:d7:5e:12:84:fd:f3:12:c7:5a:40:7a:0b:58:
                    fa:eb:f4:0e:3b:70:52:bc:56:5a:8b:a6:8c:24:b5:
                    fb:3c:7e:d0:f7:5a:5f:4a:82:e0:42:f5:08:ec:34:
                    fe:b6:48:48:17:fb:8b:e3:02:9e:52:73:88:48:f1:
                    15:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D6:FF:43:FC:BB:22:1C:43:4F:AE:FE:2B:92:A9:E4:ED:2C:1A:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/fb0a3356-03fd-361d-a7c8-8772eaf1d30f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.crl

            X509v3 Authority Key Identifier:
                keyid:0C:61:A1:93:6A:44:3C:E2:11:31:FA:40:42:68:F7:A6:E7:34:84:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.48.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:73:a4:ec:24:6b:c4:c2:2e:b8:90:cd:92:48:a4:6f:62:36:
         35:b0:35:4d:2b:39:af:c0:f0:d5:5a:de:ca:8b:8e:08:9b:30:
         c1:42:52:1b:14:a7:dd:4e:86:0c:71:fc:58:55:80:41:d0:c0:
         09:b2:d0:ef:25:fa:fa:cd:c0:c5:e4:f6:31:82:26:ed:87:53:
         33:0a:1d:01:83:de:9d:d9:7a:95:5c:7e:ca:6b:bc:b0:4b:d5:
         59:79:42:15:8a:8a:02:bc:c4:40:f8:f6:8b:07:76:af:bf:38:
         b9:cd:0e:41:13:69:11:4b:75:63:e6:d7:73:5e:3d:11:78:1c:
         27:55:78:d7:ab:b6:28:4f:4f:71:4c:84:51:48:79:b9:32:64:
         7c:ec:5e:d9:23:61:a2:11:69:0d:05:06:2d:c1:b2:68:d5:18:
         f7:43:69:14:a9:18:16:57:00:35:45:77:a0:c7:2e:69:7d:93:
         d7:4d:cc:f8:c8:40:50:a0:7d:3a:d1:06:07:52:59:c2:1b:05:
         1d:c7:4b:b4:3e:39:2e:ff:a4:71:55:0b:dd:79:c8:70:d7:44:
         1d:34:ae:75:06:a4:29:64:8f:98:e4:a3:90:b0:3d:e9:ec:83:
         59:14:f4:90:bf:a3:c1:3e:a2:ae:96:9e:8b:2b:6e:91:5d:24:
         5a:b3:f6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:38:46 2026 by rpki-client